Toolbar isearch

Résolu
Bonjour à tous

Depuis hier apres-midi j'ai une petite barre de recherche qui fait que s'afficher dans le coin en bas a droite au dessus de l'heure.

J'ai tout essayé (ad-aware/microsoft antispyware/spybot searc&destroy..) mais je ne suis pas parvenu a le supprimer

Quelqu'un peut-il m'aider

voici un screen :
http://membres.lycos.fr/ultratfe/isearch.jpg

14 réponses

  1. Contributeur
    Salut,

    Télécharge Hijackthis:
    http://www.merijn.org/files/hijackthis.zip

    Dezippe-le dans un dossier prévu a cet effet.
    Par exemple C:\hijackthis
    Lance le puis clique sur
    "do a system scan and save logfile" et pas autre chose
    Ensuite, fais un copier-coller du log entier ici.
    0
    1. Logfile of HijackThis v1.99.1
      Scan saved at 13:39:22, on 28/04/2005
      Platform: Windows XP (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
      C:\WINDOWS\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\Explorer.exe
      C:\PROGRA~1\NORTON~1\NORTON~2\GHOSTS~2.EXE
      C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
      C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
      C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
      C:\WINDOWS\System32\nvsvc32.exe
      C:\Program Files\Fichiers communs\Panda Software\PavShld\pavprsrv.exe
      C:\WINDOWS\svchost.exe
      C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
      C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Messenger Plus! 3\MsgPlus.exe
      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
      C:\WINDOWS\System32\LVCOMSX.EXE
      C:\Program Files\Logitech\Video\LogiTray.exe
      C:\WINDOWS\isrvs\desktop.exe
      C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      C:\Program Files\MessengerDiscovery\MessengerDiscovery.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\Logitech\Video\FxSvr2.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\WINDOWS\system32\n?pdb.exe
      C:\Documents and Settings\fatih\Bureau\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = file://C:\DOCUME~1\fatih\LOCALS~1\Temp\sp.html
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = file://C:\DOCUME~1\fatih\LOCALS~1\Temp\sp.html
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = ;localhost
      F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Nail.exe
      O2 - BHO: Activimmo - {4E7BD74F-2B8D-469E-DEF1-F078BD81B93C} - C:\WINDOWS\DOWNLO~1\actitool.dll
      O2 - BHO: (no name) - {520474D9-CC7D-430E-93D3-8D01900A0C0C} - c:\windows\system32\lmhhb.dll (file missing)
      O2 - BHO: IE Update Class - {5B4AB8E2-6DC5-477A-B637-BF3C1A2E5993} - C:\WINDOWS\isrvs\sysupd.dll
      O2 - BHO: (no name) - {5E5D426C-8FD4-F62D-F4B5-F56DA145B1CE} - C:\WINDOWS\System32\bxfev.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O2 - BHO: (no name) - {CB5739A0-4534-46B9-A4AB-ED45BE25D976} - C:\WINDOWS\System32\iccvid32.dll
      O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O3 - Toolbar: Activimmo - {4E7BD74F-2B8D-469E-DEF1-F078BD81B93C} - C:\WINDOWS\DOWNLO~1\actitool.dll
      O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
      O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
      O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [AntiSite] C:\Program Files\AntiSite\AntiSite.exe
      O4 - HKLM\..\Run: [Desktop Search] C:\WINDOWS\isrvs\desktop.exe
      O4 - HKLM\..\Run: [ffis] C:\WINDOWS\isrvs\ffisearch.exe
      O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
      O4 - HKLM\..\RunOnce: [MicrosoftAntiSpywareCleaner] C:\Program Files\Microsoft AntiSpyware\gcASCleaner.exe
      O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart
      O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      O4 - HKCU\..\Run: [MessengerDiscovery] C:\Program Files\MessengerDiscovery\MessengerDiscovery.exe
      O4 - HKCU\..\Run: [Hmtl] C:\Documents and Settings\fatih\Application Data\ctro.exe
      O4 - HKCU\..\Run: [Cqsrwfpz] C:\WINDOWS\System32\n?pdb.exe
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - Global Startup: SpySubtract.lnk = C:\Program Files\interMute\SpySubtract\SpySub.exe
      O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
      O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
      O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
      O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
      O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
      O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
      O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_01\bin\npjpi142_01.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_01\bin\npjpi142_01.dll
      O15 - Trusted Zone: *.slotchbar.com
      O15 - Trusted Zone: *.ysbweb.com
      O15 - Trusted Zone: *.slotchbar.com (HKLM)
      O15 - Trusted Zone: *.ysbweb.com (HKLM)
      O16 - DPF: ppctlcab - http://ppupdates.ca.com/downloads/scanner/ppctlcab.cab
      O16 - DPF: {093F9CF8-0DE1-491C-95D5-5EC257BD4CA3} - http://akamai.downloadv3.com/binaries/IA/dtc32_FR_XP.cab
      O16 - DPF: {1C955F3B-5B32-4393-A05D-24B4970CD2A1} - http://streamp.babenet.com/cabs/videox.cab
      O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/SmileyCentralInitialSetup1.0.0.6.cab
      O16 - DPF: {297F2B65-017C-11D5-A128-00D0B7869AD6} (SpectorPhotoUploader Control) - http://photoprint.photohall.be/import/spu.cab
      O16 - DPF: {299A9646-5250-4BDC-AA93-30040D85EE20} (CaraPlus.ChatClient) - http://www.caraplus.com/activex/cab/Caraplus.CAB
      O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://ppupdates.ca.com/downloads/scanner/axscanner.cab
      O16 - DPF: {2FF18E20-DE11-11D1-8161-00A0C90DD90C} (MSNBC News Menu Control 3.01) - http://www.ntv.com.tr/download/nm1228.cab
      O16 - DPF: {2FF18E30-DE11-11D1-8161-00A0C90DD90C} (MSNBC News Menu Control 3.02) - http://www.ntv.com.tr/download/nm0321.cab
      O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
      O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_44.cab
      O16 - DPF: {469C7080-8EC8-43A6-AD97-45848113743C} - http://akamai.downloadv3.com/binaries/IA/nethv32_FR_XP.cab
      O16 - DPF: {4E7BD74F-2B8D-469E-DEF1-F078BD81B93C} (Activimmo) - http://www.toolbar.be/actitool.cab
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by18fd.bay18.hotmail.msn.com/resources/MsnPUpld.cab
      O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
      O16 - DPF: {C36112BF-2FA3-4694-8603-3B510EA3B465} (Lycos File Upload Component) - http://f002.mail.caramail.lycos.fr/app/uploader/FileUploader.cab
      O16 - DPF: {D06A22B4-6087-4D3D-B7AF-82B113E9ABD4} (CPostLaunch Object) - http://www2.verizon.net/update/msnwebinstall/includes/vzWebIns.CAB
      O16 - DPF: {D5FC2094-4B01-4F6C-A07C-E247C9442E5A} (AvatarWeb Control) - http://www.msnplus.co.kr/download/activex/AvatarWeb.cab
      O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IncrediMail) - http://www2.incredimail.com/contents/setup/downloader_sp1/imloader.cab
      O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by23fd.bay23.hotmail.msn.com/activex/HMAtchmt.ocx
      O16 - DPF: {F5192746-22D6-41BD-9D2D-1E75D14FBD3C} - http://216.65.38.226/crack.CAB
      O18 - Protocol: bw+0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw+0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
      O18 - Protocol: bwg0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwg0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: offline-8876480 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Filter: text/html - {950238FB-C706-4791-8674-4D429F85897E} - C:\WINDOWS\isrvs\mfiltis.dll
      O20 - Winlogon Notify: WB - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\fastload.dll
      O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
      O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
      O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
      O23 - Service: GhostStartService - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~2\GHOSTS~2.EXE
      O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
      O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
      O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Program Files\Fichiers communs\Panda Software\PavShld\pavprsrv.exe
      O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe
      O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
      O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
      O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\FICHIE~1\SONYSH~1\AVLib\Sptisrv.exe
      O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe
      0
  2. Contributeur
    Tout d'abord, fais tes mises à jour via Windows Update :
    ouvre ta page Internet, Outils, Wndows Update
    Installe-les toutes et redémarre ton PC !

    Pendant ce temps, on s'occupe de ton log !
    0
    1. Le probleme c'est que je ne sais pas faire le Windows Update, quand j'ouvre la page, ca fait "Pas de réponse".

      Pour l'instant je veu me débarasser de ces spywares ou trojans, ensuite je vai graver sur CD mes dossiers et fichiers nécessaires (ce qui va prendre beaucoup de temps) mais isearch et compagnie font ralentir. Apres m'être débarasser de ces trucs, d'avoir graver mes fichiers, je vai formater et réinstaller windows
      0
  3. Contributeur
    D'abord, peux-tu faire un scan en ligne ici, pour vérifier si tu n'as rien question virus :
    http://www.ravantivirus.com/scan/

    Clique sur "To continue without subscribing click here" et attends.
    Lorsque Ready est affiché dans Status, coche la case Autoclean puis clique sur "Scan my PC"
    A la fin de l'analyse, copie/colle le rapport ici.
    0
    1. Je copie/colle le raport entier ? Parcequ'il est vraiment long

      Sinon tout a la fin du rapport ya ça :

      Scanned
      ============================
      Objects: 53647
      Directories: 5288
      Archives: 1139
      Size(Kb): -625336
      Infected files: 676

      Found
      ============================
      Viruses found: 24
      Suspicious files: 1
      Disinfected files: 0
      Mail files: 109
      0
      1. Contributeur
        Oui, copie-colle le ! On a du boulot !!!
        0
        1. Pourtant mon Norton Antivirus ne detecte rien du tout :-s

          Scan started at 28/04/2005 14:09:53

          Scanning memory...
          Scanning boot sectors...
          Scanning files...
          C:\xxx.exe - TrojanDownloader:Win32/Delf.CB -> Infected
          C:\Documents and Settings\All Users\Documents\ îÚ_sgr.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\All Users\Documents\!ReadMe.exe - Backdoor:Win32/Gobot.S -> Infected
          C:\Documents and Settings\All Users\Documents\#phatass - Worm:Win32/Gaobot -> Infected
          C:\Documents and Settings\All Users\Documents\bmsvc32.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\All Users\Documents\bomsvc32.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\All Users\Documents\crss.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\All Users\Documents\csrs.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\All Users\Documents\cvmonitor.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\All Users\Documents\dmsvc32.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\All Users\Documents\explore.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\All Users\Documents\explored.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\All Users\Documents\fensvc32.exe - Worm:Win32/Gaobot -> Infected
          C:\Documents and Settings\All Users\Documents\gmsvc32.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\All Users\Documents\msaa.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\All Users\Documents\msinstl.exe - Worm:Win32/Dedler.R -> Suspicious
          C:\Documents and Settings\All Users\Documents\msnmsgr.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\All Users\Documents\mssvc32.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\All Users\Documents\NortonAntiVirus.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\All Users\Documents\NortonAV.exe - Worm:Win32/Gaobot -> Infected
          C:\Documents and Settings\All Users\Documents\rpc.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\All Users\Documents\runsvc32.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\All Users\Documents\smsls.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\All Users\Documents\svcnet.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\All Users\Documents\svcroot.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\All Users\Documents\svcsp.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\All Users\Documents\svcsys32.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\All Users\Documents\svhost.exe - Worm:Win32/Gaobot -> Infected
          C:\Documents and Settings\All Users\Documents\system32.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\All Users\Documents\uninstall.exe - Worm:Win32/Dedler.R -> Infected
          C:\Documents and Settings\All Users\Documents\wintask.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\All Users\Documents\winz-task.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\All Users\Documents\ó]jtass - Worm:Win32/Gaobot -> Infected
          C:\Documents and Settings\All Users\Documents\Ma musique\winiso\WINISO53.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-5db50b5e-2a5905d6.class - Java/Bytverify -> Infected
          C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-63644d4e-45040a27.class - Java/Bytverify -> Infected
          C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\VerifierBug.class-1756e264-6349d86f.class - Java/Bytverify -> Infected
          C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\VerifierBug.class-28b7d374-57e69bb4.class - Java/Bytverify -> Infected
          C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-6e37709f-27da68ce.zip->Gummy.class - Trojan:Java/ClassLoader.D -> Infected
          C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-6e37709f-27da68ce.zip->Counter.class - Trojan:Java/ClassLoader.D -> Infected
          C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-6e37709f-27da68ce.zip->VerifierBug.class - Trojan:Java/ClassLoader.D -> Infected
          C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-78eef63f-2683cd45.zip->Gummy.class - Trojan:Java/ClassLoader.D -> Infected
          C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-78eef63f-2683cd45.zip->Counter.class - Trojan:Java/ClassLoader.D -> Infected
          C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-78eef63f-2683cd45.zip->VerifierBug.class - Trojan:Java/ClassLoader.D -> Infected
          C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-11faa9ed-2da0d5df.zip->GetAccess.class - Trojan:Java/ClassLoader -> Infected
          C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-11faa9ed-2da0d5df.zip->InsecureClassLoader.class - Java/Bytverify -> Infected
          C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-11faa9ed-2da0d5df.zip->Installer.class - TrojanDownloader:Java/OpenConnection.F -> Infected
          C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-11faa9ed-4f831c31.zip->GetAccess.class - Trojan:Java/ClassLoader -> Infected
          C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-11faa9ed-4f831c31.zip->InsecureClassLoader.class - Java/Bytverify -> Infected
          C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-11faa9ed-4f831c31.zip->Installer.class - TrojanDownloader:Java/OpenConnection.F -> Infected
          C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-11faa9ed-76a6e5f1.zip->GetAccess.class - Trojan:Java/ClassLoader -> Infected
          C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-11faa9ed-76a6e5f1.zip->InsecureClassLoader.class - Java/Bytverify -> Infected
          C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-11faa9ed-76a6e5f1.zip->Installer.class - TrojanDownloader:Java/OpenConnection.F -> Infected
          C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-190119e9-2d64b048.zip->GetAccess.class - Trojan:Java/ClassLoader -> Infected
          C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-190119e9-2d64b048.zip->InsecureClassLoader.class - Java/Bytverify -> Infected
          C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-190119e9-2d64b048.zip->Installer.class - TrojanDownloader:Java/OpenConnection.F -> Infected
          C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-190119e9-332aa130.zip->GetAccess.class - Trojan:Java/ClassLoader -> Infected
          C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-190119e9-332aa130.zip->InsecureClassLoader.class - Java/Bytverify -> Infected
          C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-190119e9-332aa130.zip->Installer.class - TrojanDownloader:Java/OpenConnection.F -> Infected
          C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-1f5b6b54-2bdce580.zip->GetAccess.class - Trojan:Java/ClassLoader -> Infected
          C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-1f5b6b54-2bdce580.zip->InsecureClassLoader.class - Java/Bytverify -> Infected
          C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-1f5b6b54-2bdce580.zip->Installer.class - TrojanDownloader:Java/OpenConnection.F -> Infected
          C:\Documents and Settings\fatih\Bureau\ev\start.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Bureau\ev\QuickTime\QuickTimeInstaller.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Bureau\Jeux\Counter Strike\HLSW.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Bureau\PORTFOLIO\portfolio\zspoof.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Bureau\Raccourcis Bureau non utilisés\acdsee.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Bureau\Raccourcis Bureau non utilisés\AVIPreview.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Bureau\Raccourcis Bureau non utilisés\Nandub.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Bureau\Raccourcis Bureau non utilisés\psmplay.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Bureau\Raccourcis Bureau non utilisés\WINISO.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Local Settings\Temp\sp.html - Trojan:HTML/Starpage* -> Infected
          C:\Documents and Settings\fatih\Local Settings\Temp\temp.frB506 - Trojan:HTML/Starpage* -> Infected
          C:\Documents and Settings\fatih\Local Settings\Temp\1A866E76\directxperience_100\Uninstall.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Local Settings\Temp\ICD2.tmp\jinstall.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Local Settings\Temp\ins1.tmp\LDMClient.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Local Settings\Temp\ins2.tmp\LDMClient.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Local Settings\Temp\Répertoire temporaire 1 pour 19_XP.zip\CMR2.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Local Settings\Temp\Répertoire temporaire 1 pour caraflood2.zip\CaraFlood2.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Local Settings\Temp\Répertoire temporaire 1 pour ecard.zip\ecard.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Local Settings\Temp\Répertoire temporaire 1 pour minou.zip\Minou.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Local Settings\Temp\Répertoire temporaire 2 pour ecard.zip\ecard.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Local Settings\Temp\_ISTMP2.DIR\_ISTMP0.DIR\ISUninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Local Settings\Temporary Internet Files\Content.IE5\IINRL4ZJ\125399[1].exe - Tool:PornDialer.BP -> Infected
          C:\Documents and Settings\fatih\Local Settings\Temporary Internet Files\Content.IE5\IINRL4ZJ\12[1].exe - TrojanDownloader:Win32/Small.MY -> Infected
          C:\Documents and Settings\fatih\Local Settings\Temporary Internet Files\Content.IE5\JYQIFEYT\125399[1].exe - Tool:PornDialer.BP -> Infected
          C:\Documents and Settings\fatih\Local Settings\Temporary Internet Files\Content.IE5\RH9REAY9\1[1].htm - Exploit:HTML/MhtRedir.gen* -> Infected
          C:\Documents and Settings\fatih\Mes documents\Mes fichiers reçus\hlkeyfr15\hlkeyfr.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Mes documents\Mes images\Fatih\Mirc\mirc.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Mes documents\Mes images\Fatih\progz\aawsepersonal.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Mes documents\Mes images\Fatih\progz\KLR0076E.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Mes documents\Mes images\Fatih\progz\SPNG2.0.217b.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Mes documents\Mes images\Fatih\progz\hijackthis_198\HijackThis.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Mes documents\Mes images\Fatih\ultraslan\titan5shuk.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Mes documents\programme\eChanblard.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Mes documents\programme\eChanblard\eMuleWatcher.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Mes documents\programme\eChanblard\bin\AVIPreview.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Mes documents\programme\eChanblard\bin\vlc.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Mes documents\programme\eChanblard\config\update.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Mes documents\programme\son\CTZAPXX.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Mes documents\programme\son\COMMON\PSConv.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Mes documents\programme\son\COMMON\ReadReg.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Mes documents\satellite\AGSetup0609.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Mes documents\satellite\ChipCat.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Mes documents\satellite\magicloadmodule.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Mes documents\satellite\setup.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Mes documents\satellite\setup0362.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Mes documents\satellite\NEC-STBDownload\NEC-STBDownload.exe - Win32/HLLP.Jeefo -> Infected
          C:\Documents and Settings\fatih\Mes documents\satellite\progr\MultiProg.exe - Win32/HLLP.Jeefo -> Infected
          C:\NVIDIA\Win2KXP\66.93\nvudisp.exe - Win32/HLLP.Jeefo -> Infected
          C:\NVIDIA\Win2KXP\66.93\setup.exe - Win32/HLLP.Jeefo -> Infected
          C:\NVIDIA\WinXP-2K\45.23\keystone.exe - Win32/HLLP.Jeefo -> Infected
          C:\NVIDIA\WinXP-2K\45.23\nwiz.exe - Win32/HLLP.Jeefo -> Infected
          C:\NVIDIA\WinXP-2K\45.23\Setup.exe - Win32/HLLP.Jeefo -> Infected
          C:\OMS\IVIEW\IBROW.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\ACE Mega CoDecS Pack\ASPI Layer Install\aspichk.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\ACE Mega CoDecS Pack\Media Player Classic\mplayerc.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\AVIcodec.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\AVIDeFreezer.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\AVIFrate.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\AVIPreview.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\DriveSpeed.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\InfoTool.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\lamedropXPd.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\LSXMpgCfg.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\NetPlayer.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\NetServer.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\OggCut.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\oggdropXPd.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\Validator.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\VFAPIConv.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\vsconv.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\VSRip.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\vssconf.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\DivX Fix\DivFix.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\Graph Edit\GraphEdit.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\GSpot\GSpot.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\OGGMuX\OggMux.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\AceMegaCodec\setup.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Adobe\Acrobat 5.0\Reader\AcroRd32.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Ahead\CoverDesigner\CoverDes.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Ahead\ImageDrive\ImageDrive.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Ahead\Nero\Uninstall\UNNero.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Ahead\Nero BackItUp\NBJ.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Ahead\Nero BackItUp\NBR.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Ahead\Nero SoundTrax\SoundTrax.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Ahead\Nero StartSmart\NeroStartSmart.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Ahead\Nero Toolkit\CDSpeed.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Ahead\Nero Toolkit\DriveSpeed.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Ahead\Nero Toolkit\InfoTool.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Ahead\WMPBurn\WMPBurn.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Analog Devices\SoundMAX\DLSLdr.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Analog Devices\SoundMAX\DLSLoader.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Analog Devices\SoundMAX\SMax4.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Analog Devices\SoundMAX\SMax4Wiz.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\AntiSite\AntiSite.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\BBL\Security\hb32.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\CyberLink\Common\UpdateIPR.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\CyberLink\PowerDVD\CLDMA.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\CyberLink\PowerDVD\cltest.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\CyberLink\PowerDVD\ddtester.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\CyberLink\PowerDVD\PowerDVD.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\DecalConverter\DecalConverter.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\DV Series\Ap.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\DV Series\Uninstall.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\DV Series\Console\SelPCCam.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\DV Series\Console\Watch.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\DV Series\Sound'Em\bin\SoundEm.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\DV Series\Sound'Em\bin\SoundVw.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\DV Series\Sound'Em\data\0101010000\SoundVw.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\InstallShield\Driver\7\Intel 32\IDriver.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver2.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\InstallShield\Driver\9\Intel 32\IDriver.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\InstallShield\Driver\9\Intel 32\IDriver2.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\InstallShield\engine\6\Intel 32\IKernel.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\InstallShield\engine\6\Intel 32\knlwrap.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\Logitech\CdlsHand\CdlsHand.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\CamServr.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\CamWizrd.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\DelDev.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\InstFiles.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\InstMed.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\Shutdown.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\Update.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\VidCtrl2.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\Microsoft Shared\Database Replication\WZCNFLCT.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\Microsoft Shared\Equation\EQNEDT32.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\Microsoft Shared\MSPaper\MSPOCRDC.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\Microsoft Shared\MSPaper\MSPSCAN.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\Microsoft Shared\MSPaper\MSPVIEW.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\Microsoft Shared\Office10\DW.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\Microsoft Shared\PhotoEd\PHOTOED.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\vs7jit.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\Microsoft Shared\web server extensions\50\bin\CFGWIZ.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\Real\Update_OB\rnuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\Sony Shared\OpenMG\updater\udapp.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\Sony Shared\OpenMG\updater\udconf.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\Sony Shared\OpenMG\updater\udlaunch.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\Symantec Shared\CCLGVIEW.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\Symantec Shared\NMain.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\Symantec Shared\Sevinst.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\Symantec Shared\LiveReg\IraLrShl.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\Symantec Shared\LiveReg\VcSetup.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\System\Mapi\1036\CNFNOT32.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\System\Mapi\1036\SCANPST.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\Verizon Online\SFP\vzNetSvc.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\Verizon Online\SFP\vzSFPWin.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Fichiers communs\Verizon Online\VOLMSN\vzMsnIns.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\InstallShield Installation Information\{117C01B5-9D68-4A15-85E2-A7CDFA82CEB9}\Setup.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\InstallShield Installation Information\{12042FF7-8D00-4384-9A25-638918B94950}\Setup.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\InstallShield Installation Information\{3B24B725-D81F-442D-8CE5-2AF05A4A4CC9}\Setup.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\InstallShield Installation Information\{5809E7CF-4DCF-11D4-9875-00105ACE7734}\Setup.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\InstallShield Installation Information\{71D6CE84-B7DC-4166-8E0D-56C1C37BFB5A}\Setup.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\InstallShield Installation Information\{77E923E1-59E2-4254-A3BC-D582234DCBD5}\Setup.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\InstallShield Installation Information\{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}\Setup.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\InstallShield Installation Information\{B3B299F9-AD78-4AE6-99EC-70B9F13D7636}\Setup.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\InstallShield Installation Information\{D0194539-8118-4FD7-8ABA-912B2D479B48}\Setup.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\InstallShield Installation Information\{EE85B4C2-49F2-4A3B-A8FA-458DAD0D820F}\Setup.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\InstallShield Installation Information\{EFB21DE7-8C19-4A88-BB28-A766E16493BC}\setup.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\InstallShield Installation Information\{EFCE5837-FC21-11D6-9D24-00010240CE95}\Setup.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\InstallShield Installation Information\{F0A37341-D692-11D4-A984-009027EC0A9C}\Setup.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\InstallShield Installation Information\{F1BA3CD5-89DC-4273-8603-A75F33E9B335}\Setup.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\InstallShield Installation Information\{FFF5DEE7-8107-436B-9726-7573458FE6AE}\setup.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\intelliScore Polyphonic Demo\iSpmrsd.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\interMute\SpySubtract\CWSInstall.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\interMute\SpySubtract\SpySub.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Internet Explorer\ie6setup.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\IxoVM\ixovm.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\IxoVM\ixovmupd.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Jasc Software Inc\Paint Shop Pro 7\Register.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Jasc Software Inc\Paint Shop Pro 7\tubeconverter.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Jasc Software Inc\Setup Files\Paint Shop Pro 7 Try and Buy\setup.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Java\j2re1.4.1_02\javaws-1_2_0_02-windows-i586-i.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Java\j2re1.4.2_01\bin\jucheck.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Java\j2re1.4.2_01\javaws\javaws.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Kazaa Lite Resurrection\AVIPreview.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Kazaa Lite Resurrection\gspot.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Kazaa Lite Resurrection\kanat.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Kazaa Lite Resurrection\kchecker.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Kazaa Lite Resurrection\kdat.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Kazaa Lite Resurrection\ksig.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Kazaa Lite Resurrection\mp3shield.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Kazaa Lite Resurrection\ProtoWall 2.0.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Kazaa Lite Resurrection\virtualdub.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Lavasoft\Ad-Aware SE Personal\unregaaw.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Lavasoft\Ad-Aware SE Personal\UNWISE.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Lavasoft\Ad-Aware SE Personal\Plugins\Langs\UNWISE.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Logitech\Desktop Messenger\8876480\7.2.0.137-8876480SL\Install\bwUnin.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Logitech\Desktop Messenger\8876480\7.2.0.137-8876480SL\Install\LiteInst.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Logitech\Desktop Messenger\8876480\7.2.0.137-8876480SL\Program\Sprite6.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Logitech\Print Service\UNWISE.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Logitech\Video\Editor2.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Logitech\Video\FWHlpApp.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Logitech\Video\FWSetDlg.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Logitech\Video\ISStart.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Logitech\Video\Launcher.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Logitech\Video\QSend.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Logitech\Video\QSync.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Logitech\Video\WaveChk.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\MessengerDiscovery\blockUser.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\MessengerDiscovery\deleteUser.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\MessengerDiscovery\launchDP.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\MessengerDiscovery\launchIM.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\MessengerDiscovery\prjMassDP.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\MessengerDiscovery\shell.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\MessengerDiscovery\unins000.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\MessengerDiscovery\Plugins\prjAutoComplete.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Microsoft AntiSpyware\gcASNotice.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Microsoft AntiSpyware\gcasServ.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Microsoft AntiSpyware\gcasServAlert.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Microsoft AntiSpyware\gcasSWUpdater.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Microsoft AntiSpyware\GIANTAntiSpywareMain.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Microsoft AntiSpyware\GIANTAntiSpywareUpdater.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Microsoft AntiSpyware\MSSSRT.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Microsoft AntiSpyware\Quarantine\C4DD913A-D416-4D55-8D90-03D31E\5CC24B5B-9452-41EE-9923-3F55DA - Trojan:Win32/StartPage.IX -> Infected
          C:\Program Files\Microsoft Office\Office10\FRONTPG.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Microsoft Office\Office10\GRAPH.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Microsoft Office\Office10\MCDLC.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Microsoft Office\Office10\MSACCESS.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Microsoft Office\Office10\MSIMPORT.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Microsoft Office\Office10\MSQRY32.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Microsoft Office\Office10\MSTORDB.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Microsoft Office\Office10\MSTORE.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Microsoft Office\Office10\NSREX.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Microsoft Office\Office10\POWERPNT.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Microsoft Office\Office10\PROFLWIZ.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Microsoft Office\Office10\SETLANG.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Microsoft Office\Office10\VTIDB.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Microsoft Office\Office10\VTIDISC.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Microsoft Office\Office10\VTIFORM.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Microsoft Office\Office10\VTIPRES.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Microsoft Office\Office10\1036\SCHDPL32.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\mIRC\mirc.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\MP3 Shield\MP3Shield.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\MPEGPlayer\MPEGPlayer\Mpegp32.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\MSN\MSNCoreFiles\dw.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\MSN\MsnInstaller\msninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\MSN Gaming Zone\zone.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\MSN Gaming Zone\zsetup.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Norton SystemWorks\CKA.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Norton SystemWorks\NSWCFG.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Norton SystemWorks\OBC.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Norton SystemWorks\Norton AntiVirus\BOOTWARN.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Norton SystemWorks\Norton AntiVirus\CFGWIZ.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Norton SystemWorks\Norton AntiVirus\QCONSOLE.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Norton SystemWorks\Norton CleanSweep\csinsmnt.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Norton SystemWorks\Norton Ghost\Ghost Boot Wizard.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Norton SystemWorks\Norton Ghost\Ghostexp.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStart.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Norton SystemWorks\Norton Utilities\NDD32.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Norton SystemWorks\Norton Utilities\SI32.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Norton SystemWorks\Norton Utilities\UE32.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Norton SystemWorks\Norton Utilities\WINDOC.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Norton SystemWorks\Norton Utilities\WIPINFNT.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Norton SystemWorks\Process Viewer\PrcView.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Norton SystemWorks\Speed Disk\SDNTC.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Norton SystemWorks\Web Cleanup\WCQUICK.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Norton SystemWorks\Web Cleanup\WCVIEWER.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\PowerIE6\PowerIE6.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\quickmov\grdecouv\grdecouv.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\quickmov\grdecouv\UNWISE.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\quickmov\qm\QM95.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\quickmov\qm\UNWISE.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\QuickTime\QTInfo.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\QuickTime\QuickTimePlayer.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\QuickTime\QuickTimeUpdater.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Real\RealOne Player\realplay.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Sony\SonicStage\Ojbsir.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Sony\SonicStage\Omgbkup.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Sony\SonicStage\Omgexset.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Sony\SonicStage\Omgjbox.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Stardock\Object Desktop\WindowBlinds\UNWISE.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbconfig.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbload.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Symantec\LiveUpdate\LUALL.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Symantec\LiveUpdate\SymantecRootInstaller.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\The Playa\ThePlaya.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\The Playa\validator.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Ulead Systems\Ulead COOL 360\UPano.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Ulead Systems\Ulead COOL 360\UPV.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Ulead Systems\Ulead COOL 360\UPViewer.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Ulead Systems\Ulead Photo Explorer 6.0\PE6.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Valve\Steam\Steam.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Valve\Steam\uninstall_hl2.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Valve\Steam\UNWISE.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Valve\Steam\Unwise32.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\VideoLAN\VLC\vlc.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Visicom Media\FTP Expert 3\ftpxpert3.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\WebSiteViewer\125399.exe - Tool:PornDialer.BP -> Infected
          C:\Program Files\Winamp5\AOD\AolAod.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\WinASPI\WinASPI\Aspichk.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\Windows Media Player\migrate.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\WinISO\WinISO.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\WinISO\WINISO53.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\WinRAR\WinRAR.exe - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\WinZip\WZQKPICK.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Program Files\WinZip\WZSEPE32.EXE - Win32/HLLP.Jeefo -> Infected
          C:\Sierra\Half-Life\hlkeyfr.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\bwUnin-7.2.0.120-8876480SL.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\bwUnin-7.2.0.137-8876480SL.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\exdl.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\installer_MARKETING28.exe - TrojanDownloader:Win32/Adload.E -> Infected
          C:\WINDOWS\IsUn040c.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\IsUninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\iun6002.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\IxoVMRmv.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\PLAY32.EXE - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\Pplugin4.exe - PWS:Win32/LdPinch.CU -> Infected
          C:\WINDOWS\PSCONV.EXE - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\QTW32DEL.EXE - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\READREG.EXE - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\services.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\Setup1.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\svchost.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SynCor.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\UnGins.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\unin040c.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\uninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\UNWISE.EXE - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$hf_mig$\KB840315\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$hf_mig$\KB840315\update\update.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$hf_mig$\KB840987\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$hf_mig$\KB840987\update\update.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$hf_mig$\KB841356\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$hf_mig$\KB841356\update\update.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$hf_mig$\KB841533\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$hf_mig$\KB841533\update\update.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$hf_mig$\KB841873\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$hf_mig$\KB841873\update\update.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$hf_mig$\KB873376\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$hf_mig$\KB873376\update\update.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$hf_mig$\KB887811\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$hf_mig$\KB887811\update\update.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$hf_mig$\KB887822\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$hf_mig$\KB887822\update\update.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$NtUninstallKB824141$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$NtUninstallKB828028$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$NtUninstallKB828035$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$NtUninstallKB828741$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$NtUninstallKB833987$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$NtUninstallKB834707-IE6SP1-20040929.091901$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$NtUninstallKB835732$\helpctr.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$NtUninstallKB835732$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$NtUninstallKB837001$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$NtUninstallKB839645$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$NtUninstallKB840315$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$NtUninstallKB840374$\helpctr.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$NtUninstallKB840374$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$NtUninstallKB840987$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$NtUninstallKB841356$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$NtUninstallKB841533$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$NtUninstallKB841873$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$NtUninstallKB842773$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$NtUninstallKB873376$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$NtUninstallKB887811$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$NtUninstallKB887822$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$NtUninstallQ315000$\netsetup.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$NtUninstallQ324096$\cfgwiz.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$NtUninstallQ328940$\helpctr.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$NtUninstallQ328940$\msconfig.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$NtUninstallQ828026$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\KB821557\update\update.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\KB823182\update\update.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\KB823980\update\update.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\KB824105\update\update.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\KB824141\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\KB824141\update\update.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\KB824146\update\update.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\KB828028\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\KB828028\update\update.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\KB828035\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\KB828035\update\update.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\KB828741\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\KB828741\update\update.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\KB833987\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\KB835732\helpctr.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\KB835732\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\KB835732\update\update.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\KB837001\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\KB837001\update\update.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\KB839645\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\KB839645\update\update.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\KB840374\helpctr.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\KB840374\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\KB840374\update\update.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\Q328310\update\update.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\Q329048\update\update.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\Q329170\update\update.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\Q329390\update\update.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\Q329441\update\update.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\Q329834\update\update.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\Q331953\update\update.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\Q810577\update\update.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\Q810833\update\update.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\Q811493\update\update.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\Q811630\update\update.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\Q815021\update\update.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\$xpsp1hfm$\Q817606\update\update.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\Fichiers d'installation de Windows Update\ie6setup.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\isrvs\sysupd.dll - TrojanDownloader:Win32/Small.QT -> Infected
          C:\WINDOWS\LastGood\PCHEALTH\HELPCTR\Binaries\helpctr.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\LastGood\PCHEALTH\HELPCTR\Binaries\msconfig.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dxdiag.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\LastGood\System32\dxdiag.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\LastGood\System32\EGAUTH.dll - Trojan:Win32/P2E.G -> Infected
          C:\WINDOWS\LastGood\System32\keystone.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\LastGood\System32\netsetup.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\LastGood\System32\nwiz.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\LastGood\System32\DLLCache\cfgwiz.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\LastGood\System32\DLLCache\dxdiag.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\LastGood\System32\DLLCache\helpctr.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\LastGood\System32\DLLCache\msconfig.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\LastGood.Tmp\System32\keystone.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\LastGood.Tmp\System32\nwiz.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dxdiag.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\sCache32\2 Find MP3 8.2.0.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\AC3-MP3 converter.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\ACDSee 5.5b.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\ACDSee Classic 2.79.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Ad-aware 6.5 (new).exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Adobe Acrobat Reader 5.6.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Adobe PhotoShop 7.1 crack.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\All Editor 3.0b.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\AOL Instant Messenger 6.1.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Auction Sentry (new).exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\AudioLabel CD Labeler 3.0 (+crack).exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Battlefied1942 Pack4 (crack+bloodpatch).exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\BearShare 5.1.1.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\C&C Generals Pack2 (new patch).exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Complete UK Music Database 4.2.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\DirectDVD 4.9.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\DivX Bundle 6.2.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\DivX edit (new).exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\DivX Video Bundle 5.5.1.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Download Accelerator Plus 6.3.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\DvD Rip guide (+tools) st0rm.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Dynamite Downloads.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Easy CD Creator Software Update.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Find 1.0.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\FlashFXP (keygen).exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\FreeRip 4.30.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Genie Stream 3.2.4.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\GetRight 5.5 + crack.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Global DiVX Player 2.0.1.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Gothic 2 (m-patch).exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Grokster 2.0.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Hacker Tutorial (by ph3Akz).exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Half-Life keygen (+ogc hack).exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\HL keys (working).exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\I.G.I. 2 (new crack).exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\ICQ Lite beta (b2253).exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\ICQ Pro 2003a beta (b4600).exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\iMesh 4.1 beta.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\iSnipeIt 5.0c.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\James Bond 007 Nightfire crack.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Kazaa Media Desktop 2.5.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Kazaa Skins 1.8.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\KaZooM MP3 Kazaa Accelerator 2.5.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Medal Of Honor (Allied Assault) crack.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Microangelo 6.0b.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\mIRC 6.x addon patch.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\mIRC s3th war-script.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Morpheus 2.6.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\MP3 cut pro 3.0.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\MSN Messenger 5.5.10.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Need for Speed 6 (new cars + crack).exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\NeoNapster 3.92.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Nero Burning ROM 5.8.2.4.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Network Cable + ADSL Speed 2.0 (beta).exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\New Nvidia (geForce) drivers (beta).exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Nimo Codec Pack 9.0 (stable).exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Operation Flashpoint (bloopatch).exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Patch Creator 3.5a.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\PhotoShow 3.1.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Pop-Up Stopper 4.0 (beta).exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Ps2 to Pc tutorial (+tool).exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\QuickTime 7.2 (new).exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Raven Shield 5.32 crack.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\RealJukebox Basic 2.8.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\RealOne Free Player 2.8.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\RemoteSpy 1.5.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Sim City 4 crack.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Splinter Cell crack.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\TitJiggle (flash game).exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Trillian 0.8 + plugins.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\UniversalFlood (4.8b).exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Unreal2 (2.8) crack.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\UT2003 multi-crack (new).exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Warcraft3 battle.net(2.5) crack.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Window Washer 4.8.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\WinMX 3.5.1.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\WinRAR 3.8.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\WinZip 8.3b (crack).exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\WinZip 9.0 SR-1.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\Wippit 2.1 (beta).exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\WS_FTP LE 6.0.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\sCache32\XViD bundle (codec+tutorial).exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\accwiz.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\agentsvr.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\cfgwiz.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\clipbrd.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\conf.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\dfrgntfs.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\dialer.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\dlimport.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\dwwin.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\eudcedit.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\explorer.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\fp98swin.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\fsquirt.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\fxsclnt.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\fxscover.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\helpctr.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\icwconn1.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\iexpress.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\irftp.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\logagent.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\logonui.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\migload.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\migrate.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\migwiz.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\migwiz_a.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\mmc.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\mobsync.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\moviemk.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\mplay32.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\msconfig.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\msmsgs.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\mspaint.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\mstsc.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\netfxupdate.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\netsetup.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\ntbackup.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\osk.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\pinball.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\progman.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\regedit.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\rsnotify.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\rstrui.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\setregni.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\setup_wm.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\sndrec32.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\spider.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\spuninst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\sysocmgr.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\taskmgr.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\togac.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\tourstrt.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\unregmp2.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\wbemtest.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\wiaacmgr.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\winhlp32.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\wmiadap.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\wmiprvse.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\wordpad.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\wscript.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\wuauclt.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\wuauclt1.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\lang\cintsetp.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\lang\imjpdct.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\lang\imjpdsvr.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\lang\imjpinst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\lang\imjpmig.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\lang\imjprw.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\lang\imjputy.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\lang\tintsetp.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\update\update.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\speech\vcmd.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\system\sservice.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\system32\Axdist.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\system32\exdl.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\system32\fservice.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\system32\intronsad.exe - Trojan:Win32/Startpage.FF -> Infected
          C:\WINDOWS\system32\keystone.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\system32\lpzxczxct.exe - TrojanDownloader:Wi
          0
        2. la suite :

          C:\WINDOWS\system32\lpzxczxct.exe - TrojanDownloader:Win32/Small.MY -> Infected
          C:\WINDOWS\system32\MafiaSetup.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\system32\NeroCheck.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\system32\netsetup.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\system32\nvappbar.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\system32\nvdspsch.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\system32\nvudisp.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\system32\nwiz.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\system32\ss2uinst.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\system32\systemctrl.exe - Trojan:Win32/Startpage.FF -> Infected
          C:\WINDOWS\system32\Ud3rT0n2.dll - TrojanDownloader:Win32/Rameh.A -> Infected
          C:\WINDOWS\system32\wincom.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\system32\wincom_.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\system32\wininv.dll - Backdoor:Win32/Prorat.1_6 -> Infected
          C:\WINDOWS\system32\winkey.dll - Backdoor:Win32/Prorat.1_2 -> Infected
          C:\WINDOWS\system32\Wint351.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\system32\wisptis.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\system32\wuauclt1.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\system32\xms32.exe - Worm:Win32/SdDrop.C -> Infected
          C:\WINDOWS\system32\Cult3D\C3DE.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\system32\drivers\delprot.sys - VirTool:WinNT/Ispro.B -> Infected
          C:\WINDOWS\system32\FinePointLib\vzNetDetectEx.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\system32\Macromed\Shockwave 10\UNWISE.EXE - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\system32\Macromed\Shockwave 8\UNWISE.EXE - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\system32\quicktime\QTPluginInstaller.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\system32\ReinstallBackups\0001\DriverFiles\keystone.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\system32\ReinstallBackups\0001\DriverFiles\nwiz.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\system32\ReinstallBackups\0004\DriverFiles\keystone.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\system32\ReinstallBackups\0004\DriverFiles\nwiz.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\system32\ReinstallBackups\0006\DriverFiles\keystone.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\system32\ReinstallBackups\0006\DriverFiles\nwiz.exe - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\system32\spool\drivers\w32x86\3\E_DMSG00.EXE - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\system32\spool\drivers\w32x86\3\E_DPPE03.EXE - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_c4259c8\E_DMSG00.EXE - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_c4259c8\E_DPPE03.EXE - Win32/HLLP.Jeefo -> Infected
          C:\WINDOWS\twain_32\LogiVid\HVideoS2.exe - Win32/HLLP.Jeefo -> Infected

          Scanned
          ============================
          Objects: 53647
          Directories: 5288
          Archives: 1139
          Size(Kb): -625336
          Infected files: 676

          Found
          ============================
          Viruses found: 24
          Suspicious files: 1
          Disinfected files: 0
          Mail files: 109
          0
        3. salut neo, j'ai le meme pb que fatih, j'ai donc fait un scan avec rav mais je sais pas ce qu'il faut supprimer...Ce serait sympa si tu pouvais m aider..Merci d'avance
          je copierai mon scan si tu me reponds...Bye
          0
      2. Contributeur
        Petit bout par petit bout, supprime les fichiers en gras :

        C:\xxx.exe
        C:\Documents and Settings\All Users\Documents\ îÚ_sgr.exe
        C:\Documents and Settings\All Users\Documents\!ReadMe.exe
        C:\Documents and Settings\All Users\Documents\#phatass
        C:\Documents and Settings\All Users\Documents\bmsvc32.exe
        C:\Documents and Settings\All Users\Documents\bomsvc32.exe
        C:\Documents and Settings\All Users\Documents\crss.exe
        C:\Documents and Settings\All Users\Documents\csrs.exe
        C:\Documents and Settings\All Users\Documents\cvmonitor.exe
        C:\Documents and Settings\All Users\Documents\dmsvc32.exe
        C:\Documents and Settings\All Users\Documents\explore.exe
        C:\Documents and Settings\All Users\Documents\explored.exe
        C:\Documents and Settings\All Users\Documents\fensvc32.exe
        C:\Documents and Settings\All Users\Documents\gmsvc32.exe
        C:\Documents and Settings\All Users\Documents\msaa.exe
        C:\Documents and Settings\All Users\Documents\msinstl.exe
        C:\Documents and Settings\All Users\Documents\msnmsgr.exe
        C:\Documents and Settings\All Users\Documents\mssvc32.exe
        C:\Documents and Settings\All Users\Documents\NortonAntiVirus.exe
        C:\Documents and Settings\All Users\Documents\NortonAV.exe
        C:\Documents and Settings\All Users\Documents\rpc.exe
        C:\Documents and Settings\All Users\Documents\runsvc32.exe
        C:\Documents and Settings\All Users\Documents\smsls.exe
        C:\Documents and Settings\All Users\Documents\svcnet.exe
        C:\Documents and Settings\All Users\Documents\svcroot.exe
        C:\Documents and Settings\All Users\Documents\svcsp.exe
        C:\Documents and Settings\All Users\Documents\svcsys32.exe
        C:\Documents and Settings\All Users\Documents\svhost.exe
        C:\Documents and Settings\All Users\Documents\system32.exe
        C:\Documents and Settings\All Users\Documents\uninstall.exe
        C:\Documents and Settings\All Users\Documents\wintask.exe
        C:\Documents and Settings\All Users\Documents\winz-task.exe
        C:\Documents and Settings\All Users\Documents\ó]jtass
        C:\Documents and Settings\All Users\Documents\Ma musique\winiso\WINISO53.EXE
        0
        1. Je supprime simplement de mon pc, je ne dois pas réecrire comme tu l'as fait, c'est un exemple ce que tu as écrit ?
          0
      3. Contributeur
        Tu suis le chemin C:\Documents and Settings\All Users\Documents
        et tu supprimes les fichiers indiqués en gras !
        0
        1. Ok je ferai ça petit à petit, la je vai allé bientot au boulot
          Je continue le soir aussi

          Merci encore, on continuera ce soir ou bien demain
          0
      4. Rebonjour,

        Que dois-je faire apres avoir supprimer les trucs que tu m'as dit, je supprime petit a petit et il me reste plus beaucoup a supprimer

        Merci
        0
        1. Contributeur
          Salut fatih,

          fais moi voir où tu en es, en repostant un nouveau log de Rav (en entier, bien sûr !)
          0
          1. Bonjour,
            Je pense avoir résolu le problème

            Ce que j'ai fait ?

            J'ai redémarrer mon pc en mode sans échec (f8 au démarrage)
            Puis j'ai vu un dossier "ifsrv" sous C:/Windows

            J'ai supprimé ce fichier et j'ai plus ce problème

            Espérons que ça dure

            Merci encore
            0
        2. Contributeur
          Relance quand même un scan sur RAV, je voudrais être sûr que tes bestioles sont bien parties !
          0
          1. J'ai exactement le même problème. C'est la deuxième fois que je chope cette horreur. La première fois, j'ai suivi les conseils d'un gars sur un forum (tiens donc...). Il fallait rebooter en safe mode sans la console de récupération. Mon PC n'a jamais redémarré, toujours bloqué à l'écran de démarrage. Réinstallation complète et 2 jours pour récupérer les données (160 Gb).

            Donc.... j'ai peur !

            Pas de solution avec Spybot.

            J'ai utilisé RavAntivirus Online, qui m'annonce de mauvaises nouvelles. Voici le log :

            Scan started at 6/05/2005 15:38:32

            Scanning memory...
            process://C:\PROGRA~1\COMMON~1\wwkm\wwkmm.exe - TrojanDownloader:Win32/TSUpdate.K -> Infected
            Scanning boot sectors...
            Scanning files...
            C:\Documents and Settings\ba\Local Settings\Application Data\Identities\{3AD1BBB1-DD82-4532-8087-0F2E39B89238}\Microsoft\Outlook Express\Boîte de réception.dbx->Message.24: ("HappyMany" [HappyMobile : pas de temps ` perdre !])->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
            C:\Documents and Settings\ba\Local Settings\Application Data\Identities\{45FC4C2B-A6E6-478F-88A7-D8A3ADB8B3FC}\Microsoft\Outlook Express\Éléments supprimés.dbx->Message.12: (fa380288@skynet.be [Information])->(part0002:Details.zip)->Details.txt ... - Win32/Netsky.Z@mm -> Infected
            C:\Documents and Settings\Weben\Local Settings\Application Data\Identities\{8383F019-F8F1-4EAD-B39E-937BADA17550}\Microsoft\Outlook Express\Boîte de réception.dbx->Message.23: ("HappyMany" [HappyMobile : pas de temps à perdre !])->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
            C:\Documents and Settings\Weben\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst->Attachment.3010: "document.zip"->document.txt .pif - Win32/Mydoom.A@mm -> Infected
            C:\Program Files\common files\wwkm\wwkmm.exe - TrojanDownloader:Win32/TSUpdate.K -> Infected
            C:\RECYCLER\S-1-5-21-2215411835-3117754479-2142776105-1142\Dc4877.exe - TrojanDownloader:Win32/Delf.CB -> Infected
            C:\WINDOWS\loadclean.exe - TrojanDownloader:Win32/Delf.CB -> Infected
            C:\WINDOWS\system32\cmd32.exe - TrojanDownloader:Win32/Delf.CB -> Infected
            C:\WINDOWS\system32\drivers\delprot.sys - VirTool:WinNT/Ispro.B -> Infected

            Scanned
            ============================
            Objects: 68909
            Directories: 4174
            Archives: 1215
            Size(Kb): -1660538
            Infected files: 8

            Found
            ============================
            Viruses found: 6
            Suspicious files: 2
            Disinfected files: 0
            Mail files: 3148

            J'ai utilisé HijackThis v.1.99.1. Voici le log (attention, j'avais killé le process de desktop.exe avant d'exécuter HijackThis). J'ai mis en gras les lignes qui me paraissent dangereuses, avec notamment plein de trucs pornos qui sont apparus comme par enchantement quand je surfais sur astalavista.us :

            Logfile of HijackThis v1.99.1
            Scan saved at 15:36:31, on 6/05/2005
            Platform: Windows XP (WinNT 5.01.2600)
            MSIE: Internet Explorer v6.00 (6.00.2600.0000)

            Running processes:
            C:\WINDOWS\System32\smss.exe
            C:\WINDOWS\system32\winlogon.exe
            C:\WINDOWS\system32\services.exe
            C:\WINDOWS\system32\lsass.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\System32\svchost.exe
            C:\WINDOWS\system32\LEXBCES.EXE
            C:\WINDOWS\system32\spoolsv.exe
            C:\WINDOWS\system32\LEXPPS.EXE
            C:\WINDOWS\System32\CTsvcCDA.exe
            C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
            C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe
            C:\WINDOWS\System32\nvsvc32.exe
            C:\WINDOWS\System32\svchost.exe
            C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe
            C:\Program Files\WebDrive\wdservice.exe
            C:\WINDOWS\System32\MsPMSPSv.exe
            C:\Program Files\Trend Micro\OfficeScan Client\ofcdog.exe
            C:\WINDOWS\Explorer.EXE
            C:\WINDOWS\System32\CTHELPER.EXE
            C:\WINDOWS\System32\LXSUPMON.EXE
            C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe
            C:\WINDOWS\System32\cmd32.exe
            C:\WINDOWS\System32\RUNDLL32.EXE
            C:\PROGRA~1\COMMON~1\wwkm\wwkmm.exe
            C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
            C:\Program Files\Trend Micro\OfficeScan Client\Pop3Trap.exe
            C:\PROGRA~1\COMMON~1\wwkm\wwkma.exe
            C:\hijackthis\HijackThis.exe

            R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
            R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
            R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = about:blank
            R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
            O1 - Hosts: 66.159.20.80 www1.ndhosting.com
            O1 - Hosts: 66.159.20.80 www3.ndhosting.com
            O1 - Hosts: 66.159.20.80 www2.ndhosting.com
            O1 - Hosts: 66.159.20.80 www.ndhosting.com
            O1 - Hosts: 66.159.20.80 www.kinghost.com
            O1 - Hosts: 66.159.20.80 kinghost.com
            O1 - Hosts: 66.159.20.80 www1.kinghost.com
            O1 - Hosts: 66.159.20.80 www2.kinghost.com
            O1 - Hosts: 66.159.20.80 www3.kinghost.com
            O1 - Hosts: 66.159.20.80 www4.kinghost.com
            O1 - Hosts: 66.159.20.80 www5.kinghost.com
            O1 - Hosts: 66.159.20.80 www6.kinghost.com
            O1 - Hosts: 66.159.20.80 www7.kinghost.com
            O1 - Hosts: 66.159.20.80 www8.kinghost.com
            O1 - Hosts: 66.159.20.80 www9.kinghost.com
            O1 - Hosts: 66.159.20.80 www10.kinghost.com
            O1 - Hosts: 66.159.20.80 smutserver.com
            O1 - Hosts: 66.159.20.80 www30.smutserver.com
            O1 - Hosts: 66.159.20.80 www31.smutserver.com
            O1 - Hosts: 66.159.20.80 www32.smutserver.com
            O1 - Hosts: 66.159.20.80 agreathost.net
            O1 - Hosts: 66.159.20.80 www.agreathost.net
            O1 - Hosts: 66.159.20.80 hotfreehost.com
            O1 - Hosts: 66.159.20.80 www.hotfreehost.com
            O1 - Hosts: 66.159.20.80 greatfreehost.com
            O1 - Hosts: 66.159.20.80 www.greatfreehost.com
            O1 - Hosts: 66.159.20.80 freesmutpages.com
            O1 - Hosts: 66.159.20.80 www.freesmutpages.com
            O1 - Hosts: 66.159.20.80 apornhost.com
            O1 - Hosts: 66.159.20.80 www.apornhost.com
            O1 - Hosts: 66.159.20.80 nasty-pages.com
            O1 - Hosts: 66.159.20.80 www.nasty-pages.com
            O1 - Hosts: 66.159.20.80 sexyfreehost.com
            O1 - Hosts: 66.159.20.80 www.sexyfreehost.com
            O1 - Hosts: 66.159.20.80 x4web.com
            O1 - Hosts: 66.159.20.80 www.x4web.com
            O1 - Hosts: 66.159.20.80 sexplanets.com
            O1 - Hosts: 66.159.20.80 www.sexplanets.com
            O1 - Hosts: 66.159.20.80 maxismut.com
            O1 - Hosts: 66.159.20.80 www.maxismut.com
            O1 - Hosts: 66.159.20.80 tgpfriendly.com
            O1 - Hosts: 66.159.20.80 www.tgpfriendly.com
            O1 - Hosts: 66.159.20.80 tgp-server.com
            O1 - Hosts: 66.159.20.80 www.tgp-server.com
            O1 - Hosts: 66.159.20.80 magnaplza.com
            O1 - Hosts: 66.159.20.80 www.magnaplza.com
            O1 - Hosts: 66.159.20.80 free-xxx-server.com
            O1 - Hosts: 66.159.20.80 www.free-xxx-server.com
            O1 - Hosts: 66.159.20.80 libereco.net
            O1 - Hosts: 66.159.20.80 www.libereco.net
            O1 - Hosts: 66.159.20.80 0190-dialer.com
            O1 - Hosts: 66.159.20.80 www.0190-dialer.com
            O1 - Hosts: 66.159.20.80 xxxod.net
            O1 - Hosts: 66.159.20.80 www.xxxod.net
            O1 - Hosts: 66.159.20.80 altsights.com
            O1 - Hosts: 66.159.20.80 www.altsights.com
            O1 - Hosts: 66.159.20.80 adulthosting.com
            O1 - Hosts: 66.159.20.80 www.adulthosting.com
            O1 - Hosts: 66.159.20.80 superhova.com
            O1 - Hosts: 66.159.20.80 www.superhova.com
            O1 - Hosts: 66.159.20.80 bestpornhost.com
            O1 - Hosts: 66.159.20.80 www.bestpornhost.com
            O1 - Hosts: 66.159.20.80 hostingfree.com
            O1 - Hosts: 66.159.20.80 www.hostingfree.com
            O1 - Hosts: 66.159.20.80 xfreehosting.com
            O1 - Hosts: 66.159.20.80 www.xfreehosting.com
            O1 - Hosts: 66.159.20.80 blinghosting.com
            O1 - Hosts: 66.159.20.80 www.blinghosting.com
            O1 - Hosts: 66.159.20.80 x-x-x-hosting.com
            O1 - Hosts: 66.159.20.80 www.x-x-x-hosting.com
            O1 - Hosts: 66.159.20.80 pornparks.com
            O1 - Hosts: 66.159.20.80 www.pornparks.com
            O1 - Hosts: 66.159.20.80 sexls.com
            O1 - Hosts: 66.159.20.80 www.sexls.com
            O1 - Hosts: 66.159.20.80 royalfreehost.com
            O1 - Hosts: 66.159.20.80 www.royalfreehost.com
            O1 - Hosts: 66.159.20.80 pleasuremedia.com
            O1 - Hosts: 66.159.20.80 www.pleasuremedia.com
            O1 - Hosts: 66.159.20.80 www.mtree.com
            O1 - Hosts: 66.159.20.80 mtree.com
            O1 - Hosts: 66.159.20.80 www.dialacom.com
            O1 - Hosts: 66.159.20.80 dialacom.com
            O1 - Hosts: 66.159.20.80 nocreditcard.com
            O1 - Hosts: 66.159.20.80 www.nocreditcard.com
            O1 - Hosts: 66.159.20.80 movies-etc.com
            O1 - Hosts: 66.159.20.80 www.movies-etc.com
            O1 - Hosts: 66.159.20.80 22469.com
            O1 - Hosts: 66.159.20.80 3wisp.com
            O1 - Hosts: 66.159.20.80 www.glamourmodelsgonebad.com
            O1 - Hosts: 66.159.20.80 www.hot-adult-clips.com
            O1 - Hosts: 66.159.20.80 www.fantasiegirl.com
            O1 - Hosts: 66.159.20.80 allowednet.com
            O1 - Hosts: 66.159.20.80 www.freepornofreeporn.com
            O1 - Hosts: 66.159.20.80 www.exscapeporn.com
            O1 - Hosts: 66.159.20.80 amateurnudephoto.com
            O1 - Hosts: 66.159.20.80 amateursgonebad.com
            O1 - Hosts: 66.159.20.80 badbimbo.com
            O1 - Hosts: 66.159.20.80 beautifulbondage.com
            O1 - Hosts: 66.159.20.80 bizshura.com
            O1 - Hosts: 66.159.20.80 big-xxx-movies.com
            O1 - Hosts: 66.159.20.80 boyanxxx.com

            O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Acrobat\ActiveX\AcroIEHelper.ocx
            O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
            O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
            O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
            O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
            O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
            O4 - HKLM\..\Run: [Jet Detection] C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe
            O4 - HKLM\..\Run: [CTStartup] C:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE /run
            O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
            O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
            O4 - HKLM\..\Run: [PrinTray] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\printray.exe
            O4 - HKLM\..\Run: [LXSUPMON] C:\WINDOWS\System32\LXSUPMON.EXE RUN
            O4 - HKLM\..\Run: [OfficeScanNT Monitor] "C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe" -HideWindow
            O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
            O4 - HKLM\..\Run: [ControlPanel] C:\WINDOWS\System32\cmd32.exe internat.dll,LoadKeyboardProfile
            O4 - HKLM\..\Run: [Desktop Search] C:\WINDOWS\isrvs\desktop.exe
            O4 - HKLM\..\Run: [ffis] C:\WINDOWS\isrvs\ffisearch.exe

            O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
            O4 - HKCU\..\Run: [Ub4TrayApp] "C:\Program Files\Astase\UltraBackup\4.0\bin\ubtray.exe" /start
            O4 - HKCU\..\Run: [wwkm] C:\PROGRA~1\COMMON~1\wwkm\wwkmm.exe
            O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
            O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
            O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
            O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
            O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
            O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
            O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
            O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
            O15 - Trusted Zone: www.master69.biz
            O15 - Trusted Zone: www.sgrunt.biz
            O15 - Trusted Zone: www.yeak.net
            O15 - Trusted Zone: http://ny.contentmatch.net (HKLM)
            O16 - DPF: {084DAC27-6FA3-4F55-9005-033F2F102F5C} (ITPPDiagIE Class) - http://images.goa.com/v3/InstallGoaIT/Itpp/V2,0,1,6/npwwg.cab
            O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
            O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/20021126/qtinstall.info.apple.com/dribnif/fr/win/QuickTimeInstaller.exe
            O16 - DPF: {486E48B5-ABF2-42BB-A327-2679DF3FB822} - http://akamai.downloadv3.com/binaries/IA/ia_XP.cab
            O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
            O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/activedata/SymAData.cab
            O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.symantec.com/techsupp/activedata/ActiveData.cab
            O16 - DPF: {F4653484-F38C-455F-BB15-1175E527754E} (VideoProducer Class) - http://www.normal.video-party.com/class/webcam2.cab
            O16 - DPF: {F5C90925-ABBF-4475-88F5-8622B452BA9E} (Compaq System Data Class) - http://www29.compaq.com/falco/SysQuery.cab
            O18 - Filter: text/html - {950238FB-C706-4791-8674-4D429F85897E} - (no file)
            O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
            O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
            O23 - Service: Scan en temps réel OfficeScanNT (ntrtscan) - Trend Micro Inc. - C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe
            O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
            O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
            O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe
            O23 - Service: OfficeScanNT Listener (tmlisten) - Trend Micro Inc. - C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe
            O23 - Service: WebDrive Service (WebDriveService) - Unknown owner - C:\Program Files\WebDrive\wdservice.exe

            Que dois-je faire ?????

            En attendant une bonne âme qui voudrait m'aider, je vais faire une recherche sur le web pour trouver comment guérir mes virus.

            Merci d'avance :)
            0
        3. salut markos,
          colle ton scan

          a+
          0
          1. salut regis
            ca fait longtemps que je me suis pas connecte mais j ai tjrs le meme pb..je viens de faire 1 scan avec RAV et la je suis en train d en faire avec Seurity iGuard..
            Si quelqu un peut m aider a supprimer les dossiers indesrables, ce serait sympa..
            merci d avance
            PS: Je colle mon scan en cas de reponse
            a+
            0
            1. re...
              je copie mon scan RAV, si une ame charitable peut y jeter un coup d oeil et m aider un peu(bcp!!)...

              Scan started at 13/06/2005 10:33:46

              Scanning memory...
              Scanning boot sectors...
              Scanning files...
              C:\wp.exe - Trojan:Win32/Druogna.B -> Suspicious
              C:\n.exe - TrojanDropper:Win32/Agent.AW -> Infected
              C:\FOUND.000\FILE0000.CHK - TrojanDownloader:Win32/Agent.AN -> Infected
              C:\FOUND.000\FILE0001.CHK - TrojanDownloader:Win32/Agent.AP -> Infected
              C:\WINDOWS\benyws.dat - Trojan:Win32/Agent.BQ -> Infected
              C:\WINDOWS\vzoqdh.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ghbbli.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\xoddux.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\sysupd.exe - TrojanDownloader:Win32/Agent.Z -> Infected
              C:\WINDOWS\vwkcbq.dat - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\zoxdnu.dat - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\aaiahb.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\xyliwq.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\cbnlte.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\mydflp.dat - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\vsyqfz.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\aprahz.dat - TrojanDownloader:Win32/Agent.HT -> Infected
              C:\WINDOWS\uxtqia.dat - TrojanDownloader:Win32/Agent.Z -> Infected
              C:\WINDOWS\mgudoq.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\cucfle.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\zmtwgx.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\rqsrpk.dat - Trojan:Win32/Agent.BQ -> Infected
              C:\WINDOWS\ddzogf.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\vouhzu.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\eexesz.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\lijlxs.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\phsqxq.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\szcixp.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\dgwddk.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\cdrzmy.dat - Trojan:Win32/Agent.BQ -> Infected
              C:\WINDOWS\qntmiy.dat - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\rnlglp.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\vdkasx.dat - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\doetds.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\wopcca.dat - TrojanDownloader:Win32/Agent.AL -> Infected
              C:\WINDOWS\okhutw.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\maxkjm.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\tnvurc.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\uubeoe.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\pacyow.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\lbiawx.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\lmkdwb.dat - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\yegmid.dat - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\akmpvn.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\mspo32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\qwnle.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\n_hsuugd.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\dtbnng.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\oodsmf.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\abzljn.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\netvd32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\tekhyq.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\mpcari.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\spioar.dat - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\hmyems.dat - TrojanDownloader:Win32/Agent.HT -> Infected
              C:\WINDOWS\appte.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\sdktr32.dll - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\ntoo32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\iekz.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\sdkoz32.exe.bak - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\appdv32.exe.bak - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\n_iztpfx.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\apjbkp.dat - Trojan:Win32/Agent.BQ -> Infected
              C:\WINDOWS\hufuxb.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\netop.dll - TrojanDownloader:Win32/Agent.HT -> Infected
              C:\WINDOWS\systj.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\n_jxwlwr.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\mcdmng.dat - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\pacpjg.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\mfcsc32.exe.bak - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\crmi32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\qevmwm.dat - Trojan:Win32/Agent.BQ -> Infected
              C:\WINDOWS\appvo.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\addxe32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\crws32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ntqo32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\vytock.dat - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\xaklwc.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\sysel.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\cjkyrw.dat - TrojanDownloader:Win32/Agent.AL -> Infected
              C:\WINDOWS\netib32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\hpzbyd.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\craz32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\msbb32.exe.bak - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\sdkqu.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\crhm32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\sdkfp32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\n_wzzlzi.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\syskx.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\croh32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\atllj.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\sdtnio.dat - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\winfe32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\atlso.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ipqb32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ipln.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\addgk.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\iorwtd.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\apiko32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\iehx32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ipvr.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\javaxe.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\addgk32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\iezj.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\crjp32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ipxx.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\syszp32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\sysug.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\brvguc.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\msjv.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ntsn32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\lorhjq.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\apilt.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\apioj.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ccejvd.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\apppv.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ntkf.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ipoo.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ntcp32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\logeav.dat - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\hycohf.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\netvv32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ipdz.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\nethr32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ywubox.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\msqx.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ntpk32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\netnf.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\nltwzz.dat - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\qzguxf.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\jaouxc.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\winen32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\javael.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\fehfmx.dat - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\hpwmsc.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ntug.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\mssb32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\mfcfx.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\d3zg32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\d3mb32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\javasa32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\mfcgu32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\winuq32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\crib32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\maqtsv.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\addml32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\sysnv32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\addbx.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\netlw32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\pmmrfy.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\iptk32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\addfd.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\apijf.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\mfcwa.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ntec32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\winqz32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\msps.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\appeq32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ipwg32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\netmj.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\syslj32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\atlql32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ipbc.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\sdkdb32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\adduv32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ntnn.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\mfcax.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ucgscx.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\javaeh32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\crep.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\sysdi.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\eptcd.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\ipqm32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\crzw32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\amyeni.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\crej32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\mfcoz32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\appna.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\iezs.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ipfy32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\nethx32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\mfcrn32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\iejo.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\apits32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\mfcdr.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\netts.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\mfcxi32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\atlcq.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\sysqz32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\appnn32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\sysmi32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\dnowyj.dat - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\javacq.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\appzk.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\crmj.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\sysjr.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\dwafhu.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ipfq.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\crrq.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\dfofik.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\nxcutb.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\msmx.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\addbt.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ieuy.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\vduopb.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ntmd32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\netsh.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\msee.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\nbsbya.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\pbgdqx.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ziniac.dat - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\euyflv.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ekpjnx.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\sysqn32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\javadx32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ipzt.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\sdkaf.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\msja32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\javasu.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\mskq.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\winbq32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\sdkqy.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ppwrfh.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\apiga32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\sdkwh.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\netee.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\javawn32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\addft.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ntxz32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\tzolph.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\javajn.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ufufdw.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ltwkxc.dat - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\msut.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\mfchx32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\mfcdz32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\addvl.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\tkypjz.dat - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\ytkfoe.dat - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\bshfpr.dat - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\qmdllw.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\apipj.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ipdq32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\uajscv.dat - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\crah.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\apiue.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\addgi32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ipiz.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\wingh.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\appim.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\crtq32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\crik.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\yhbsih.dat - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\sdkwm.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\addns32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\hdgzyw.dat - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\apiyj.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\crmf32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\addmx.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\appow32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\msok32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\winon32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\xvfjdm.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\kbwawt.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\yaasei.dat - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\sdktm.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\apide32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ierz32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\mzqopt.dat - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\crgiqp.dat - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\apidx32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ntov.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\addxb32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\d3wp32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ipcr.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ipjz32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\lxfxfo.dat - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\mfcoj.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\sysbl.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\appdy.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\apils32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\mfcde32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\msjy.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\rkrpsm.dat - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\qxnpeh.dat - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\atlvl32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\crgk.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\iejt.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\atlij.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\addte.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\wincr.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\addwv32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\sysmq.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\crfp32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\sysyt.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\rmmfhm.dat - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\appov.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\apiqa.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\soewcb.dat - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\atlag.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\atldq32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ieog32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\apijq.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\vdrbcx.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ntmv.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\mfcbe32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\winig32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\javacm32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\addim.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\sdkhc32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\netqf.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\iqmdkn.dat - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\hduurp.dat - Trojan:Win32/Agent.BQ -> Infected
              C:\WINDOWS\javahc.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\d3da.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\paspyq.dat - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\ipfx32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ntvm.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ipkr32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\aatyw.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\javayt32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\mfcfr32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\d3xb32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\usvay.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\ievd32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\winhz32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ipzq32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\crhx.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\mfcjx.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\sysdl32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\d3gx32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\iplt32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\iwcthy.dat - Trojan:Win32/Agent.BQ -> Infected
              C:\WINDOWS\sysaw.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\iqnvns.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ntmx.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\winwx.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\mfcll.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\crld.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\sdkhe32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\sawvb.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\ipmm.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\sysfz32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\addql.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ieyf.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\sdkol32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\atlis32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\sdkuy32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\crds.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\atlvw32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\addkr.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\n_htthwt.txt - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\crky32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\winam32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\addyk32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\lllcib.txt - Trojan:Win32/Agent.BQ -> Infected
              C:\WINDOWS\ntjp32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\netcu32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\crlc32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\javavt32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\javanl.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\crth32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\d3bv32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\sdkfx.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\n_hlnust.txt - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\syssv.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ipyp32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\wineg.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\appui.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ienh32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\sysxl.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\netwn.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\atlgt.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\addem32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\sdkmr.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\dwoiwd.txt - Trojan:Win32/Agent.BQ -> Infected
              C:\WINDOWS\ipml32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\iecq.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\netwa32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\syslp32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\atlgg.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\sdknh32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\atljx.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ieth32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\netps32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\mspr32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\apicn.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\fefmqb.dat - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\n_wgdrxa.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\hswscc.txt - Trojan:Win32/Agent.BQ -> Infected
              C:\WINDOWS\ntdh32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ieyd.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\sdkdf.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\msfs.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\netjp32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\ielp.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\netvt32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\lpaauv.log - Trojan:Win32/Agent.BQ -> Infected
              C:\WINDOWS\mfcto.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\sysar32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\adhrst.txt - Trojan:Win32/Agent.BQ -> Infected
              C:\WINDOWS\wecowp.dat - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\n_cqzkex.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\dmfyfp.dat - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\wehtck.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\n_zzznhn.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\cdqwrj.dat - Trojan:Win32/Agent.BQ -> Infected
              C:\WINDOWS\vnylok.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\sluztv.log - Trojan:Win32/Agent.BQ -> Infected
              C:\WINDOWS\hsndwf.dat - Trojan:Win32/Agent.BQ -> Infected
              C:\WINDOWS\crhsip.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\n_qeckvq.dat - Trojan:Win32/WebSearch.B -> Infected
              C:\WINDOWS\zenzus.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\vwpdvb.txt - Trojan:Win32/Agent.BQ -> Infected
              C:\WINDOWS\oxijyl.txt - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\gpegzw.txt - Trojan:Win32/Agent.BQ -> Infected
              C:\WINDOWS\yiotby.txt - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\linxdl.txt - Trojan:Win32/Agent.BQ -> Infected
              C:\WINDOWS\wjfdyv.log - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\rimqbh.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\kalgmi.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\nqhxsr.dat - Trojan:Win32/Agent.BQ -> Infected
              C:\WINDOWS\frscut.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\dnlspi.txt - Trojan:Win32/Agent.BQ -> Infected
              C:\WINDOWS\vnwyjk.txt - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\n_gnfwti.dat - Trojan:Win32/WebSearch.B -> Infected
              C:\WINDOWS\n_kuhgtd.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\yckizg.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\n_wihcyf.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\n_ntntva.dat - Trojan:Win32/WebSearch.B -> Infected
              C:\WINDOWS\n_hhlbvk.dat - Trojan:Win32/WebSearch.B -> Infected
              C:\WINDOWS\n_srefpz.dat - Trojan:Win32/WebSearch.B -> Infected
              C:\WINDOWS\n_ixgdgd.dat - Trojan:Win32/WebSearch.B -> Infected
              C:\WINDOWS\n_ynxbuj.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\n_zefnek.dat - Trojan:Win32/WebSearch.B -> Infected
              C:\WINDOWS\n_gwbwdt.dat - Trojan:Win32/WebSearch.B -> Infected
              C:\WINDOWS\n_jysaet.dat - Trojan:Win32/WebSearch.B -> Infected
              C:\WINDOWS\n_lwoiwc.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\n_ysjuoz.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\n_prrxor.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\n_xjxvxt.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\owgwj.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\n_yknmgo.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\n_swwxyg.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\n_gbpuvc.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\n_ffxkdf.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\n_hzxjdl.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\n_edfyfj.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\n_ctirov.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\n_grgwqe.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\n_jgpghb.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\n_pmaqdz.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\n_xdomaf.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\svcmfs.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\n_vufpdo.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\n_sehqjk.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\n_dgnmdy.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\n_iedefs.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\okzcd.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\n_rlitwz.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\nueyi.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\n_qvrxmb.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\n_jhvqbn.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\n_hckqrx.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\msli.dll - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\n_hbnmgr.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\n_vpfjrt.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\crak32.dll - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\n_svbbsk.dat - TrojanDownloader:Win32/Agent -> Infected
              C:\WINDOWS\hwmfy.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\biyvw.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\ugozz.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\jsrjz.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\appmm.dll - TrojanDownloader:Win32/Agent.CA -> Infected
              C:\WINDOWS\ffbwf.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\javaun.dll - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\uexbn.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\qtvtj.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\hcxhv.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\gxnld.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\glfos.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\kkong.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\vbftt.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\tpdqd.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\vlmqk.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\vjuyi.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\pszdy.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\lqaav.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\nnakz.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\stqkx.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\crol.dll - TrojanDownloader:Win32/Agent.HB -> Infected
              C:\WINDOWS\wintn32.dll - TrojanDownloader:Win32/Agent.HB -> Infected
              C:\WINDOWS\xmfkf.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\qhrecm.dat - Trojan:Win32/Agent.BQ -> Infected
              C:\WINDOWS\jhjjwx.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\racdq.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\tlqrf.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\mfmfd.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\wincr32.dll - TrojanDownloader:Win32/Agent.HT -> Infected
              C:\WINDOWS\dtbrk.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\ntzc32.dll - TrojanDownloader:Win32/Agent.HT -> Infected
              C:\WINDOWS\vggwg.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\apivu32.dll - TrojanDownloader:Win32/Agent.HT -> Infected
              C:\WINDOWS\javakt32.dll - TrojanDownloader:Win32/Agent.HT -> Infected
              C:\WINDOWS\opbac.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\javabz32.dll - TrojanDownloader:Win32/Agent.HT -> Infected
              C:\WINDOWS\bvszc.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\ipxl32.dll - TrojanDownloader:Win32/Agent.HT -> Infected
              C:\WINDOWS\flojh.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\nfeug.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\wwybq.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\vxpugc.dat - Trojan:Win32/Agent.BQ -> Infected
              C:\WINDOWS\oxazin.dat - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\winjc.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\msra.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\DHTMLAccess.dll - TrojanDownloader:Win32/Wintrim.O -> Infected
              C:\WINDOWS\SYSTEM32\mfcbg32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\addpc.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\apiox32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\addqo32.dll - TrojanDownloader:Win32/Agent.HB -> Infected
              C:\WINDOWS\SYSTEM32\wintm.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\mfcjl32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\iedk.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\netxv.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\apiqg32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\netei.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\d3lh.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\javapr32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ntqr32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\apivt.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\winid.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\apihx.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\javaoy32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ieex32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\d3oe.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\sysqj.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\creh32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\wincu.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\winpx.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\mfcnl32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ipbt32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\mstz.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\nttl.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\syskr32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\d3eb32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\javawi32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ntub.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\javaoa32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\atlfm32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ieol32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\atlad32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\addvh.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\apioe32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\addxd32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ntls32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\appfj.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\mfchg.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\sdkgb32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\mskd32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\apiuf32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\crqb.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\crxv.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\netwj32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\mfcue.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\systs32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\mfcsd.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ipde32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\atlwu32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\javafb.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\apieo32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\atlcj.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\netvi.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\EGDHTML_1017.dll - TrojanDownloader:Win32/Wintrim.F -> Infected
              C:\WINDOWS\SYSTEM32\appis.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\nethl.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\crdp.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\atliy.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ieuh32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\atlyz32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ipry32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\mfcbw32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\netki.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\mfcoz32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\d3xg.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\netet32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\mfcuo.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\netox.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\addhy32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\crbv.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\winfz.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\sdkpd.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ipxe32.dll - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\SYSTEM32\apikj32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\crxf.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\d3rq.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ntfe32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\d3mi32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\winrc.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\crsj.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\javaqe32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\sysvr32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\syskm32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\sysfw32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\msdp.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\crbu32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\sysbd.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ipqw.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\iphk.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\crua.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\msdt.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\crgd.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\msfn32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\winne32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\d3ew.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\mfcyd32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\msdd.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\lspom.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\winhk.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\crvs32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ntrg.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\iemq.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\atlzi.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\sdkkm32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\atlcf.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\guonm.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\mfcfx32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\alday.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\javagz.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\apiau.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\d3be32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\appfu.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ouyuu.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\badhm.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\ntjd.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\msck.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\lxbum.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\ygrln.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\mfcwo.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\sdkgu32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ipya.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\crxm.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ntyy32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\nethg.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\appnb32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ipgd.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\d3kp32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\apiok.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\atlgz.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\atlwa32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ntqq32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ntik32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ipoq32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ipnr32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\addts.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\mfcxy.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\apixo.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\sdker.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\addzy.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ieue.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\javabg32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ietd.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\sdkzi32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ipld32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ienu32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\d3lp.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\sdkna.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\netvr32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\iplv.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\atlyd32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\appny.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ntxw32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\javavd32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\avrzt.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\syszv32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ntxb32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\sysgh.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\iecl.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\netkw.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\netlp.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\crqz.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\mspz32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\mfcte32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\msqf32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\syshx.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\msjk.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ipwx32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\sysuy32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ntmw.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\mscd32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\apiuh32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\apiuu32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\appqw32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\mfcyf.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\d3fs32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\mfcxm.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\sysmk.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\mskf32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\mstt.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\mfcqu.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ntbt32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\wingv.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\sdkvo32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\d3gn32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ieag32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\crou32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\d3yz.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ntsj.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\netvk.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\winik.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ipic.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\d3nk.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\winjy32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\mspy.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\msqr32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\mslf.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\apimz32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\mfctf.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\d3ii.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\apiyc32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\sdksh32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\msug.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\sdktx32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\d3pv32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\iedx.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\atlyx.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\sysxh32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\mfcby32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\appqf32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\d3zz32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\msid.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ntvn.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\sysqx.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\atlbv32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\atllz32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\javasc.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\d3qy.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\d3cb.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\atljd32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\crvy32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\sysft.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\mspv32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\d3ny32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\addag.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\apitk.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ieeq32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\netrw32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ipit.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\d3gg.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\netma.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\winuo.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\javaxz32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\iekr.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\winda.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\mfccv32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\atlar32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\atlmu32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\msak.dll - TrojanDownloader:Win32/Agent.AN -> Infected
              C:\WINDOWS\SYSTEM32\atlyp32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\mfcpr32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\crwy32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\sysox.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\ntmn.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\sysvu32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\cros.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\atlxy32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\winhx.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\sysqf.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\d3ae32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\d3dv32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\wintc.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\sysxs32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\addlu.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\mfcnh.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\d3et.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\winpu32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\cril32.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\sysyv.exe - Backdoor:Win32/Small.EF -> Infected
              C:\WINDOWS\SYSTEM32\netrm.dll - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\SYSTEM32\zgtym.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\oppam.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\xxqkn.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\sysly32.dll - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\SYSTEM32\ieid.dll - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\SYSTEM32\xcemt.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\atlgt.dll - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\SYSTEM32\koqyq.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\mfcyu32.dll - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\WINDOWS\SYSTEM32\ipjdd.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\seifb.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\rjaxm.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\ftuir.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\atdnm.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\xflmf.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\ssbzo.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\hfnju.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\qegsu.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\x.exe - TrojanDropper:Win32/Small.UY -> Infected
              C:\WINDOWS\SYSTEM32\hvfkm.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\bfsrr.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\wplkl.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\njrev.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\krydq.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\mhsxd.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\appgj.dll - TrojanDownloader:Win32/Agent.HB -> Infected
              C:\WINDOWS\SYSTEM32\atlgr32.dll - TrojanDownloader:Win32/Agent.HB -> Infected
              C:\WINDOWS\SYSTEM32\xeziq.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\start.hta - JS/Psyme.F* -> Suspicious
              C:\WINDOWS\SYSTEM32\start.hta->(SCRIPT0000) - TrojanDropper:VBS/Inor.A* -> Infected
              C:\WINDOWS\SYSTEM32\start.hta->(SCRIPT0001) - JS/Psyme.F* -> Suspicious
              C:\WINDOWS\SYSTEM32\sdkpw.dll - TrojanDownloader:Win32/Agent.HB -> Infected
              C:\WINDOWS\SYSTEM32\winli.dll - TrojanDownloader:Win32/Agent.HB -> Infected
              C:\WINDOWS\SYSTEM32\adodj.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\vdwgs.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\anzrc.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\crnf32.dll - TrojanDownloader:Win32/Agent.HT -> Infected
              C:\WINDOWS\SYSTEM32\mfcnx.dll - TrojanDownloader:Win32/Agent.HT -> Infected
              C:\WINDOWS\SYSTEM32\sdklb32.dll - TrojanDownloader:Win32/Agent.HT -> Infected
              C:\WINDOWS\SYSTEM32\cpssh.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\sdkhq.dll - TrojanDownloader:Win32/Agent.HT -> Infected
              C:\WINDOWS\SYSTEM32\xpquy.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\squnc.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\sysrq.dll - TrojanDownloader:Win32/Agent.HD -> Infected
              C:\WINDOWS\SYSTEM32\sdkaj.dll - TrojanDownloader:Win32/Agent.HD -> Infected
              C:\WINDOWS\SYSTEM32\hjuai.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\svcaa.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\xuzdr.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\jzxkl.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\wojpg.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\WINDOWS\SYSTEM32\svcnut32.exe - TrojanDownloader:Win32/Delf.FJ -> Infected
              C:\WINDOWS\SYSTEM32\dload.exe - TrojanDownloader:Win32/Small.MY -> Infected
              C:\WINDOWS\SYSTEM32\MTC.dll - TrojanDownloader:Win32/Agent.GA -> Infected
              C:\WINDOWS\SYSTEM32\srpcsrv32.dll - TrojanDropper:Win32/Agent.AX -> Infected
              C:\WINDOWS\SYSTEM32\txfdb32.dll - TrojanDropper:Win32/Agent.AX -> Infected
              C:\WINDOWS\SYSTEM32\DRIVERS\delprot.sys - VirTool:WinNT/Ispro.B -> Infected
              C:\FOUND.008\FILE0025.CHK - TrojanDownloader:Win32/Agent.BC -> Infected
              C:\FOUND.008\FILE0195.CHK - Trojan:Win32/Agent.BQ -> Infected
              C:\Documents and Settings\bensouna gilles\Local Settings\Temp\temp.fr33CD - Backdoor:Win32/Small.EF -> Infected
              C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP557\A0454726.dll - TrojanDownloader:Win32/Agent.HT -> Infected
              C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP559\A0454738.dll - TrojanDownloader:Win32/Agent.HT -> Infected
              C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP559\A0454930.dll - TrojanDownloader:Win32/Agent.HT -> Infected
              C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP559\A0454946.dll - TrojanDownloader:Win32/Agent.HT -> Infected
              C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP559\A0454954.dll - TrojanDownloader:Win32/Agent.HT -> Infected
              C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP559\A0454961.dll - TrojanDownloader:Win32/Agent.HT -> Infected
              C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP559\A0454969.dll - TrojanDownloader:Win32/Agent.HT -> Infected
              C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP559\A0454977.dll - TrojanDownloader:Win32/Agent.HT -> Infected
              C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP559\A0454985.dll - TrojanDownloader:Win32/Agent.HT -> Infected
              C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP559\A0454993.dll - TrojanDownloader:Win32/Agent.HT -> Infected
              C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP503\A0420719.dll - TrojanDownloader:Win32/Agent.GX -> Infected
              C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP504\A0420724.dll - TrojanDownloader:Win32/Agent.GX -> Infected
              C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP504\A0421733.dll - TrojanDownloader:Win32/Agent.GX -> Infected
              C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP504\A0421734.dll - TrojanDownloader:Win32/Agent.GX -> Infected
              C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP504\A0422733.dll - TrojanDownloader:Win32/Agent.GX -> Infected
              C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP505\A0422737.dll - TrojanDownloader:Win32/Agent.GX -> Infected
              C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP505\A0424733.dll - TrojanDownloader:Win32/Agent.GX -> Infected
              C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP505\A0424738.dll - TrojanDownloader:Win32/Agent.GX -> Infected
              C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP507\A0424766.dll - TrojanDownloader:Win32/Agent.GX -> Infected
              C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP508\A0424802.dll - TrojanDownloader:Win32/Agent.GX -> Infected
              C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP508\A0424838.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP508\A0424839.dll - TrojanDownloader:Win32/Agent.GX -> Infected
              C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP508\A0424840.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
              C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP508\A0424841.dll - TrojanDownloader:Win32/Agent.CA -> Infected
              C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP508\A0424845.dll - TrojanDownloader:Win32/Agent.GX -> Infected
              C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP512\A0424866.dll - TrojanDownloader:Win32/Agent.GX -> Infected
              C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP515\A0424887.dll - TrojanDownloader:Win32/Agent.GX -> Infected
              C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP547\A0441109.exe - Backdoor:Win32/Small.EF -> Infected
              C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP548\A0444191.exe - TrojanDownloader:Win32/Small.MY -> Infected
              C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP548\A0444193.exe - TrojanDropper:Win32/Small.RC -> Infected
              C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP548\A0444198.exe - Tool:PornDialer.BP -> Infected
              C:\System Volume Information\_restore{B8
              0
              1. re,
                whaou vu le nombre de ce qu il te trouve, autant faire ca autmatiquement,

                ¤Désactive ta restauration systeme:
                Clic droit sur poste de travail puis,
                propriété, tu clique sur onglet restauration système
                tu coche la case désactiver la restauration et applique

                utilise ceci

                3/Clean Up 312:
                http://pageperso.aol.fr/Balltrap34/CleanUp312.exe

                puis celui ci:
                A2 Free (anti-trojans et worms)
                http://www.emsisoft.net/fr/software/download/

                et refais un scan pour verif

                a+
                0